CVE-2023-32461

State: Published
Severity: 5.0 Medium
Published: Sep 15, 2023
Updated: Sep 25, 2024
Reserved: May 9, 2023

Description

Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges.

Scores

CVSS	Score	Vector	Source
3.1	5.0 Medium	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L	dell

Weaknesses

CWE-122 Heap-based Buffer Overflow

Affected Products

Product	Versions
PowerEdge PlatformDell	Versions prior to 1.5.6Affected Versions prior to 1.1.3Affected Versions prior to 1.1.4Affected Versions prior to 1.2.5Affected Versions prior to 1.3.11Affected Versions prior to 1.10.2Affected Versions prior to 1.6.3Affected Versions prior to 1.10.4Affected Versions prior to 2.11.4Affected Versions prior to 2.11.3Affected Versions prior to Before 1.11.2Affected

References

https://www.dell.com/support/kbdoc/en-us/000216543/dsa-2023-292-security-update-for-dell-poweredge-server-bios-vulnerabilityvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.